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Claims : 

A mobile application security system, comprising: 
one or more nodes of a peer-to-peei^ network wherein each node is configured to execute 
a mobile application; 

a central security enforcement node connected to each node of the peer-to-peer network 
for controlling the security of a mobile application; 

the central security enforcement node further comprising means for monitoring the 
security of the mobile application as it jumps between the nodes wherein data about the mobile 
application is communicated to the central security enforcement node when the mobile 
application is communicated from a first node to a s\:ond node; and 

wherein the security monitoring means furthe\:omprises means for detecting unwanted 
changes in the code associated with the mobile application when the mobile application is 
jumping between hosts. 

2. The system of Claim 1, wherein the detecting means further comprises means for 
storing a copy of the mobile application when the mobile application is created by having the 
creating node send a copy of the mobile application to the central security enforcement node, 
means for receiving data about the mobile application when it iareceived by another node and 
means for comparing the code of the mobile application received by the other node to the stored 
copy of the mobile application to determine if changes have been n^ade to the code of the mobile 
application. 

3. The system of Claim 1, wherein the detecting means further comprises means for 
receiving a checksum of the mobile application when the mobile application is created, means 
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3 for receiving the mobile application aftenit is sent to another node, means for computing the 

4 checksum of the received mobile application and means for comparing the checksum of the 

5 mobile application after it is received by another node to the stored checksum of the mobile 

6 application to determine if changes have been made to the code of the mobile application. 
1 A mobile application security system, comprising: 

one or more nodes of a peer-to-peer network wherein each node is configured to execute 
a mobile application; 

a central security enforcement node connected to each node of the peer-to-peer network 
for controlling the security of a mobile application; 

the central security enforcement node further comprising means for monitoring the 
security of the mobile application as it jumps between tne nodes wherein data about the mobile 

8 application is communicated to the central security enforcement node when the mobile 

9 application is communicated from a first node to a secondmode; and 

10 wherein the security monitoring means further comprises means for preventing a node 

1 1 from transmitting hostile code in a mobile application to anotner node. 

1 5. The system of Claim 4, wherein the preventing means further comprises means 

2 for determining if the node dispatching the mobile application is trusted, means for stripping the 

3 code from an initially received mobile application if the host is noa trusted, means for saving the 

4 code of the mobile application, and means, when requested by another node, for providing the 

5 code for the mobile application to the requesting node. 
1 ^ mobile application security system, comprising: 
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one or more nodes of a peer-to-peer network wherein each node is configured to execute 
a mobile application; \ 

a central security enforcement node connected to each node of the peer-to-peer network 
for controlling the security of a mobile application; 

the central security enforcement node further comprising means for monitoring the 
security of the mobile application as it jumps between the nodes wherein data about the mobile 
application is communicated to the central security enforcement node when the mobile 
application is communicated from a first node to a second node; and 

wherein security monitoring means furthencomprises means for detecting unwanted 
changes in the state of the mobile application. \ 

7. The system of Claim 6, wherein the detecting means further comprises means for 
saving a copy of the state of a mobile application received from a node that received the mobile 
application, means for receiving data about the same mobile application after a jump to another 
node and means for comparing the state of the mobile application after the jump to another node 
with the stored state of the mobile application to ensure that the state of the mobile application 
has not changed. \ 



one or more nodes of a peer-to-peer network whereimeach node is configured to execute 
a mobile application; \ 

a central security enforcement node connected to each node of the peer-to-peer network 
for controlling the security of a mobile application; \ 




A mobile application security system, comprising: 
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the central security enforcement node further comprising means for monitoring the 
security of the mobile application as it jumps between the nodes wherein data about the mobile 
application is communicated to the central security enforcement node when the mobile 
application is communicated from a first node to a second node; and 

wherein the security monitoring means further comprises means for detecting unwanted 
changes in the itinerary of the mobile application. 

9. The system of Claim 8, whereintthe detecting means further comprises means for 
saving a copy of the itinerary of a mobile application received from the node that received the 
mobile application, means for receiving the same mobile application after a jump to another node 
and means for comparing the itinerary of the mobile application after the jump to another node 
with the stored itinerary of the mobile application to ensure that the itinerary of the mobile 
application has not changed. \ 

10. The system of Claim 8, wherein the itinerary comprises past historical itinerary 
data. \ 



receiving data about a mobile application at a central\security enforcement node each 
time the mobile application jumps between a first node and a second node of a peer-to-peer 
network; and \ 

monitoring the security of the mobile application as it jumps between the nodes, wherein 
the security monitoring further comprises detecting unwanted changes in the code associated 
with the mobile application when the mobile application is jumping between hosts. 




A mobile application security method, comprising: 
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1 12. The method of Claim 1 1 , wherein the detecting further comprises storing a copy 

2 of the mobile application when the mobile application is created, receiving the mobile 

3 application after it is received by another node and comparing the code of the mobile application 

4 after it is received by another node to the stored \copy of the mobile application to determine if 

5 changes have been made to the code of the mobile application. 
L Jgf? A mobile application security method, comprising: 

receiving data about a mobile application at a central security enforcement node each 
time the mobile application jumps between a first n^de and a second node of a peer-to-peer 

4 network; and 

5 monitoring the security of the mobile application as it jumps between the nodes, wherein 

6 the security monitoring further comprises preventing ^ host from transmitting hostile code in a 
L 7 mobile application to another node. 

Sal- 

L 1 14. The method of Claim 13, wherein the preventing further comprises determining if 

O 2 the node dispatching the mobile application is trusted, stepping the code from a mobile 

3 application if the host is not trusted, saving the code of the mobile application, and, when 

4 requested by another node, providing the code for the mobile application to the requesting node. 

1 A mobile application security method, comprising: 

2 receiving data about a mobile application at a central security enforcement node each 

3 time the mobile application jumps between a first node and a ^econd node of a peer-to-peer 

4 network; and 
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5 monitoring the security of the mobMe application as it jumps between the nodes, wherein 

6 the security monitoring further comprises detecting unwanted changes in the state of the mobile 

7 application. 

1 16. The method of Claim 15, wherein the detecting further comprises saving a copy of 

2 the state of a received mobile application, recewing data about the same mobile application after 

3 a jump to another node and comparing the statelof the mobile application after the jump to 
another node with the stored state of the mobile application to ensure that the state of the mobile 
application has not changed. 

yf. A mobile application security method, comprising: 

receiving data about a mobile application at a central security enforcement node each 
time the mobile application jumps between a first npde and a second node of a peer-to-peer 

4 network; and 

5 monitoring the security of the mobile application as it jumps between the nodes, wherein 

6 the security monitoring further comprises detecting unwanted changes in the itinerary of the 

7 mobile application. 

1 18. The method of Claim 1 7, wherein the detecting further comprises saving a copy of 

2 the itinerary of a received mobile application, receiving data about the same mobile application 

3 after a jump to another node and comparing the itinerary onthe mobile application after the jump 

4 to another node with the stored itinerary of the mobile application to ensure that the itinerary of 

5 the mobile application has not changed. 

1 19. The method of Claim 1 7, wherein the itinerary Comprises past historical itinerary 

2 data. 
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^fr. A mobile application security method, comprising: 

receiving data about a mobile application at a central security enforcement node each 
time the mobile application jumps between ^ first node and a second node of a peer-to-peer 
network; and 

monitoring the security of the mobile Application as it jumps between the nodes, wherein 
the security monitoring further comprises preventing untrusted hosts from initially launching 
mobile applications 
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